How To Stop A Proxy User From Dropping Tables (Doc ID 759216.1)

Last updated on NOVEMBER 22, 2016

Applies to:

Oracle Database - Enterprise Edition - Version 10.2.0.4 to 11.1.0.6 [Release 10.2 to 11.1]
Information in this document applies to any platform.
Checked for relevance on 07-Jun-2013

Goal

Whenever a proxy user connects to the database , the user gets the privileges of a session user and sometimes it is necessary to restrict the operations performed by the proxy user(ex:dropping table) .

Consider the following example in which U1 is a session user, U2 is the proxy user, TU1 is a table owned by U1:

conn / as sysdba
create user u1 identified by u1;
create user u2 identified by u2;
alter user u1 grant connect through u2;
grant connect,resource to u1;

conn u1/u1
create table tu1(a number);

conn u2[u1]/u2
drop table tu1;

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms